Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-48890	Aplazada	Crítica (9.3)	2.2%	—	Buffalo Wrh-733gbk^AI Buffalo Wrh-733gwh^AI	24/6/2025	17/6/2026	WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in miniigd SOAP service. If a remote unauthenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed.
CVE-2025-43879	Aplazada	Crítica (9.3)	2.2%	—	Buffalo Wrh-733gbk^AI Buffalo Wrh-733gwh^AI	24/6/2025	17/6/2026	WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet function. If a remote unauthenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed.
CVE-2021-20856	Modificada	Media (5.4)	0.60%	—	Elecom Wrh-733gbk Firmware Elecom Wrh-733gwh Firmware	1/12/2021	17/6/2026	Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20855	Modificada	Media (5.4)	0.60%	—	Elecom Wrh-733gbk Firmware Elecom Wrh-733gwh Firmware	1/12/2021	17/6/2026	Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20854	Modificada	Media (6.8)	0.44%	—	Elecom Wrh-733gbk Firmware Elecom Wrh-733gwh Firmware	1/12/2021	17/6/2026	ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20853	Modificada	Media (6.8)	0.44%	—	Elecom Wrh-733gbk Firmware Elecom Wrh-733gwh Firmware	1/12/2021	17/6/2026	ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20852	Modificada	Media (6.8)	0.47%	—	Elecom Wrh-733gbk Firmware Elecom Wrh-733gwh Firmware	1/12/2021	17/6/2026	Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors.